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(57) Abstract 



A method of evaluating an encryption algo- 
rithm using fractal structure analysis techniques to 
analyze linearity or nonlinearity of the algorithm. 
It includes the steps of reconstructing a new phase 
space by mapping the output values of an encrypted 
message with sequentially generated key values into 
a time series data set, measuring the Lypunov coef- 
ficients of the time series associated with the phase 
space (SI 02), measuring the correlation dimension 
based on the phase space (S103), and determining 
the stability of the algorithm after generating attrac- 
tors based on the correlation dimension (S104). The 
method provides improved reliability in developing 
encryption algorithms since it can provide a measure 
of the safeness of a particular encryption algorithm 
against possible tampering by analysing whether the 
algorithm is safe in the case where a new key replaces 
the old key, when a public or secret key becomes ex- 
posed to others* 
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Method of Evaluating Encryption Algorithms Using Chaojs. 

Analysis 

Field of Invention 

The present invention relates to a method of analyzing 
encryption algorithms . More specifically, the present 
invention relates to a method of analyzing an encryption 
algorithm using chaos analysis, which can analyzing non- 
linearity of the algorithm using the Fractal structure 
analysis technique in the case where a public key or a secret 
key become exposed to others. 

Background of the Invention 

With rapid advances in scientific technology and 
information environments, major business tasks are being 
performed by computers networked via a ultra-high-speed 
information communication network. It has become necessary 
to protect against theft or illegal disclosure of important 
information that may be scattered over various areas in a 
network, or information being transmitted or received through 
a network. 

Information protection methods may be classified into a 
primary method of restricting physical access to the 
information to be protected and a secondary method of 
encrypting the information to be protected in case when the 
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first method fails. 

Encryption converts a plain text to a cipher text whose 
meaning cannot be discerned. Decryption changes the cipher 
text 

received to a plain text using various keys used to encrypt 
the text* Reliable encryption of a plain text to a cipher 
text requires the secrecy to allow only the authorized 
personnel to access the information in the computer system, 
the integrity to allow only the authorized personal to correct 
the information, and the availability to allow only the 
authorized personnel to use the information. 

Encryption techniques may be classified into a 
conventional key system and a public key system, depending on 
the existence of a public key. In the conventional key 
system, both encryption and decryption use the same key. A 
representative example is the Data Encryption Standard (DES) 
announced by the U.S. Department of Commerce in 1977. In the 
public key system, different keys are used for encryption and 
decryption. Although its processing speed is slow, the public 
key system has an advantage of dispensing with the 
transmission of keys. Examples are the RAS encryption method, 
the Merkle-Hellmam encryption method, and the limited-body- 
phase encryption method, etc. However, such existing 
encryption systems suffer the problem of lacking data security 
because the safeness of encryption algorithms cannot be tested 
due to mathematical difficulties. 
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Objects of the Invention 

Accordingly, it is an object of the present invention to 
provide reliability in" developing an encryption algorithm for 
encrypting data being transmitted and received, by analyzing 
linearity or nonlinearity of the encryption algorithm, using 
the Fractal structure analysis, which tests whether others can 
predict a new key replacing the old key when a public or a 
secret key becomes exposed to others. 

Summary of the Invention 

The above and other objects are satisfied, at least in 
part, by an embodiment of the present invention, which 
provides a method including the steps of: 

reconstructing a new phase space by mapping the output 
values of an encrypted message with sequentially generated key 
values into a time series data set; 

measuring the Lyapunov coefficients of the data set 
generated with sequential modification of key values in the 
new phase; 

measuring the correlation dimension based on the phase 
space; and 

analyzing the stability of the algorithm by generating 
attractors based on the correlation dimension. 
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Brief Description of the Drawing 

Figure 1 is a diagram of an apparatus which evaluates an 
encryption algorithm using chaos analysis. 

Figure 2 is a flov chart showing a preferred embodiment 
for analyzing an encryption algorithm using chaos chart. 

Detailed Description of the Drawing 

References will now be made in detail to a preferred 
embodiment of the present invention, illustrated in the 
drawings . 

Figure 1 illustrates a computer 100 having an encryption 
key generator 110 connected to an evaluator 120. Encryption 
key generator 110 generates encryption keys using encryption 
algorithms to encrypt text. Evaluator 120 determines the 
stability of encryption algorithms. A display device 130 
being connected to computer 100 displays outputs from the 
computer. 

When a public or secret key generated by encryption key 
generator 110 becomes exposed to unauthorized users, a new 
public or secret key must be generated. Encryption key 
generator 

110 generates a new key to replace the old key using the 
encryption algorithm. In order to determine the integrity of 
the new key, evaluator 120 analyzes a rescaled range (R/S) of 
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the keys to determine the possibility of predicting the new 
key. Evaluator 120 generates an output displayed on display 
130 which displays the stability of the encryption algorithm 
and will show the possibility of determining whether the new 
key can be predicted by others. 

If an encryption algorithm does not possess the random 
walk property, ie, the algorithm possess the linear property, 
the keys generated by the algorithm may be predicted. Thus, 
the random walk property may be used to gauge the possibility 
of cracking. 

Two methods are suggested for identifying the random walk 
property: a method based on the classical statistics and a 
method based on the chaos analysis which can prove 
nonlinearity of the system. The present invention uses chaos 
analysis to verify an encryption algorithm. If a system has 
the chaotic property , it is possible to explain and predict 
the system's nonlinearity because the system is deterministic. 

But, a reliable encryption algorithm requires, in 
addition to the non-linearity element, that others may not be 
able to predict a new key replacing the old key when the old 
key was exposed to others. To determine the possibility of 
predicting the replacement key by others when a secret or a 
public key becomes exposed to others, a text encrypted using 
the algorithm is mapped into a continuous-time series pattern, 
and its property is analyzed using chaos analysis. 

5 
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As shown in Fig. 1, when a public or secret key or a 
particular encryption algorithm used to encrypt a text becomes 
exposed to others and the old key is replaced by a new key, 
the rescaled range (R/S) of the keys for maintaining the 
security of a randomly selected encryption algorithm is 
analyzed to determine the possibility of prediction of the key 
by others. 

The rescaled range (R/S) of the corresponding key is 
defined as follow: 
[Equation 1] 

(R/S) n = C • n H (where H is the Hurst exponent) 
The average value of the rescaled range from the above 
equation becomes " 0" meaning a local variation- Taking 
logarithms of both sides of the above equation yields the 
following : 

[Equation 2] 

log (K/S)n = H log(n) + log (C) 

Since R/S in the above equation increases as fast as the 
increment of a square root of R/S, it is obtained through the 
following steps. 

First , in the case of a time series of length M r it is 
transformed into a log ratio having the length N = M - 1 as 
follows : 

[Equation 3] 

Ni = log (Mu+i)/Mi) , where i = 1,2,...., {M - 1) 

6 
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From the above equation, a subperiod of "A", having 
length n and satisfying the relation A • n - N is obtained. 
Then, the label la (a = 1,2,...., A) is attached to each 
subperiod. After the value of N*,a (k = 1,2,...., n) are 
defined on each elements of label la, the following equation 
is used to calculate an average value over the length n and 
the label la: 

[Equation 4] 




where ea is the average value of Mi that has the length n and 
includes Ja. 

In addition, the time series (X*, a ) representing the 
accumulated departures from the average values over each label 
J a , is defined as follows: 
[Equation 5] 

Xk, a = '=« , where £=1,2, , n 

Therefore, from equation 4, the rescaled range Ria of the 
other key can be obtained from the difference between the 
maximum and minimum value of Xx.a within the subperiod la as 
follows : 

[Equation 6] 

Ria = Max (Xk.a) - Mln (Xk.a) , where k = 1,2, ,n. 
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Also, the standard deviation Sia on each side label la is 
defined as follows: 
[Equation 7] 



Since the rescaled range defined in equation 6 is 
normalized by the ratio of standard deviation Sia as defined 
in equation 7 , the rescaled range (R/S) is the same as Ria / 
Sia on each label la. 

Since the sequential value "A" of length n can be obtained by 
equation 3 above, it follows that 



[Equation 8] 




, where (M- \)ln is an integer. 



Here, since (M - 1) / n is an integer and the length n 
increases to a next value, n can be used at the starting and 
ending points of the time series by repeating the above 
process up to n - (M - l)/2. Accordingly, least squared 
regression is performed on a graph plotted using log(n) as an 
independent variable and log ( R/ Sa) as a dependent variable, 
and the Hurst exponent xx fT can be obtained from the slope of 
the graph. 

After obtaining the Hurst exponent w H' in the rescaled 

range 

R/S through the same process as stated above, measurement of 
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Lyapunov exponents is conducted at step 102. The Lyapunov 
exponent (L) in i dimension (pi(t)) is measured as follows: 
(Equation 9] 



Since one must have input data, the embedding dimension, 
the time lag, the evolution time, the max/min distance, and 
the mean orbital period to measure the Lyapunov exponents, the 
embedding dimension is obtained from the correlation integral 
Cm; the time lag from the relation m*t (delay) = Q (period) ; the 
mean orbital period from the analysis of the reconstruction 
range; the max/min distance from the embedding dimension. 

Once the input data, the embedding dimension, the time 
lag, the evolution time, the max/min distance, and the mean 
orbital period are determined, the distance between two points 
(DI) - Li(Xo) , separated at least by the mean orbital period, 
is measured, and the interval for measuring the Lyapunov 
exponent, (DF) - Li(Xo) , is determined. Then the Lyapunov 
exponent is initialized as follows: 

[Equation 10] 




) 



SUM= ' >=■ 




L(xj * i) 
L(xj) 



) 



+ SUM 



zLyap = [SUM /Iteration] 
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In the above, if the measurement distance of Lyapunov 
exponent DF > Dist_Max and DF < Dist_min, a new point, " DN' 
is selected. In this case, the time interval of the newly 
selected point must be at least one period. The new point 
must be between the min and the max distances, and the angle 
between DN and DF must be minimum in the phase space. If a 
new point is selected, DI is set to DN, and the steps of 
initializing the Lyapunov coefficient are repeated. 

Once the measurement of Lyapunov exponents is completed 
using the steps above, measurement of a correlation dimension 
is performed at step 103. Although the correlation dimensions 
are observed as one of the coefficients of the time series, 
it has a limitation of having value between 1 and 2. However, 
in the case of reconstructing a time series in a phase space, 
since it is possible to observe all independent coefficients, 
the correlation dimension (m) , starting from m=2, is measured, 
by increasing the diameter of Fractal structure using the 
following equation: 

[Equation 11] 

where Z(x)= 1 if R - I a - «| > 0 ; otherwise N is the 
observation constant, R is the distance, and C, is the 
correlation dimension integral function m. 

Z(x) is called a Heaviside function. A correlation 
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dimension means a probability that there will be two points 
within the Fractal diameter between t and t-1. The 
correlation dimension is derived by measuring the slope of a 
graph of log {Cm[R}) versus log([R]) based on the above 
result. 

Once the correlation dimension is derived, attractors are 
reconstructed at step 104. For example, a random time series 
pattern having n numbers of data with their sampling interval 
of 

5t is expressed as X(t) , X{t + 5t) , X(t + 2 • 5t) , X(t + 3 • 
£t),...., X(t + (n-1) • 6t) . After setting the time lag (T) 
to twice the sampling time <5t(T = 2 5t) , a three-dimensional 
vector column is obtained, expressed as X(t), X(t + 2 • 5t) , 
X(t + 4 • St), X(t + 1 • <5t), X(t + 3 • (5t),..., X(t + (n-5) 
• St), X(t + • <5t), X{t + (n-1) • c5t) . 

By plotting these points in the three-dimensional space, 
a three-dimensional attractor may be obtained showing the 
dynamic property of the system. If the value of n equals or 
is larger than the original dimension and is properly 
selected, the vector column will show the same dynamic 
property as the original movement. 

The strange attractor reconstructed by the same method 
described above, in general, has a transformed shape, not 
precisely the same shape as the original attractor. However, 
t since the Lyapunov exponent and the Fractal dimension are not 
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altered by such a transformation, these values can be 
calculated from the reconstructed attractor. 

As explained above, the present invention provides 
reliability and safeness in developing an encryption algorithm 
by providing a method for determining the safeness of the 
algorithm where a new key replaces the old when a public key 
or secret key becomes exposed to others • 
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What is claimed is: 

1. A method for evaluating an encryption algorithm using 
chaos 

analysis, comprising the steps of: 

obtaining Hurst exponent in the analysis of a rescaled 

range with sequential generation of key values of encryptions- 
measuring Lyapunov coefficients; 

measuring the correlation dimension based on a time 
series reconstructed in phase space; and 

determining stability of the algorithm after constructing 
attractors based on the correlation dimension. 

2. The method of claim 1, wherein the step of analyzing a 
rescaled range further comprises the steps of: 

transforming the rescaled range into a log ratio value 
of length N - M - 1 where M is the length of the time series; 

calculating a mean value n and la where n is the length 
of a subperiod and la is a label that attaches to the 
subperiod; 

calculating accumulated departure of the time series and 

its ranges- 
calculating standard deviation for each said la and then 

calculating starting and ending points of the time series; and 
obtaining the Hurst exponent using least square 
* regression. 
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3. The method of claim 1, wherein the step of measuring the 
Lyapunov coefficients further comprises of steps of: 

measuring at least one orbital period by measuring the 
distance between selected two separate points/ {DI) - Ll(Xa); 

determining measurement distance of the Lyapunov 
exponent, (DF) - Ll{xi) , and then initializing the Lyapunov 
exponent; 

selecting a new point "DN" if said measurement distance 
of the Lyapunov exponent DF > DistJMax and DF < Dist_min; and 

setting DI to DN, and repeating the above steps, 
including initializing of the Lyapunov exponent, if the new 
point is selected. 

4. The method of claim 1, wherein the step of measuring a 
correlation dimension further comprises the steps of: 

increasing embedding dimension (m) from m = 2; 
increasing a diameter of Fractal structure; and 
drawing a graph to measure the correlation dimension. 
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